Security experts at Symantec published a new report on malware pretending to be Android app responsible for removing malicious programs. After being installed, the app is not run as a usual antivirus program, but injects mobile devices with malicious codes.
According to company’s statement, for the last couple of days virus called Fakedefender was actively infecting devices.
“Android.Fakedefender is a Trojan horse for Android devices that displays fake security alerts in an attempt to convince the user to purchase an app in order to remove non-existent malware or security risks from the device,” – states report.
After a more detailed analysis, security experts said that there are several types of Fakedefender. Some of them block the whole device, and some – block certain functions demanding to purchase an app to unblock them.
According to Symantec, when knowing the device may be infected users should manually remove fake antivirus program or install a true one (coming from the vendor). Security experts point out that users should not try rebooting the device.
